Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Vop3TZSO3nBcI2F60b4tEIn4DLs.roa
File: Vop3TZSO3nBcI2F60b4tEIn4DLs.roa (raw, json)
Hash identifier: gyJANqlkc2iAV8vVuY7Y2HUc0B7Q2kdBNBRzQ2uPcTU=
Subject key identifier: 56:8A:77:4D:94:8E:DE:70:5C:23:61:7A:D1:BE:2D:10:89:F8:0C:BB
Certificate issuer: /CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Certificate serial: 019F23683DC32CB0205106F0EB7796F7316D
Authority key identifier: 5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Vop3TZSO3nBcI2F60b4tEIn4DLs.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215037
IP address blocks: 81.177.208.0/22 maxlen: 24
81.177.208.0/23 maxlen: 23
81.177.210.0/23 maxlen: 23
194.117.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:c3:2c:b0:20:51:06:f0:eb:77:96:f7:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=568a774d948ede705c23617ad1be2d1089f80cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:c0:ad:c7:7a:c5:98:0d:b5:36:0c:3f:5f:
6c:b5:fd:aa:a1:59:86:ce:67:30:51:a3:76:e6:c2:
0c:d7:5a:cf:65:62:c8:ff:4c:56:56:9f:99:e7:66:
8d:78:af:4d:cd:41:5c:4c:cc:58:7a:6a:e3:71:b5:
fb:6d:7d:44:c5:6c:c0:37:a8:57:57:14:9f:f2:71:
02:13:13:55:43:a8:58:96:15:fe:f4:e1:ae:cb:12:
91:c7:f9:89:c9:ac:27:6f:74:1f:4f:06:c9:53:f0:
a6:4c:94:ff:9a:55:22:3f:77:07:40:b1:49:5f:ce:
d1:a7:93:98:47:f4:66:92:d8:92:7f:ab:88:d9:8c:
92:68:d6:6a:42:12:1c:67:fe:44:48:7e:00:20:8a:
f1:d6:ae:c4:1b:9d:41:af:6c:49:c6:2a:40:0b:39:
91:a5:c7:29:19:00:9f:ac:b6:64:27:e8:71:19:80:
75:96:9d:d7:6f:97:c2:24:fa:a7:98:21:67:49:f3:
48:24:c4:13:79:50:13:6b:c4:f4:28:47:80:6c:e1:
9d:8b:b7:9c:75:12:4e:45:2a:42:a5:2a:7e:6e:21:
49:8c:5f:4d:06:6a:7c:28:3a:39:4c:c5:75:78:6c:
12:d0:b9:79:fe:4e:ce:18:25:2c:fc:10:77:3e:33:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:77:4D:94:8E:DE:70:5C:23:61:7A:D1:BE:2D:10:89:F8:0C:BB
X509v3 Authority Key Identifier:
keyid:5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Vop3TZSO3nBcI2F60b4tEIn4DLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.208.0/22
194.117.65.0/24
Signature Algorithm: sha256WithRSAEncryption
66:03:2a:1a:69:71:bf:db:43:25:02:69:e7:ac:f9:65:44:17:
01:2f:0e:90:90:6d:39:5f:52:0a:c2:15:47:14:14:67:af:68:
9d:43:79:76:e3:7e:7e:61:1f:04:47:bf:98:56:76:6f:57:e7:
a5:b3:1d:b7:04:02:58:ed:0f:e2:00:46:4d:5a:91:ce:62:3c:
0c:76:87:3d:26:9c:f7:fd:32:9c:84:e3:70:6c:d4:8f:eb:5d:
89:32:bc:4a:eb:d5:bd:07:46:0c:42:8f:31:11:6a:bd:16:55:
75:09:3a:83:61:36:52:1f:b4:ad:ce:20:1a:6b:cf:d5:2e:04:
bd:b4:66:b0:7d:82:bc:31:0c:cc:45:72:38:86:6f:b2:0e:1a:
10:95:37:ee:4c:0e:c1:cd:fc:a9:ac:4c:cd:29:56:77:f8:b1:
bc:c3:c0:1a:2c:49:09:32:47:4e:6b:a5:9e:a5:da:86:9c:85:
c8:63:a9:5f:c9:76:b7:bc:ea:1e:70:0c:62:3a:3b:35:fa:16:
4f:e7:38:aa:2e:5a:61:fe:31:6a:70:99:38:29:05:32:75:16:
17:3a:11:40:3a:92:80:e0:0a:cc:f8:b5:8d:7a:fa:41:13:b2:
fd:67:99:e9:f2:06:13:c1:33:16:1b:f6:e9:60:ad:49:11:9d:
03:ae:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:28 2026 by rpki-client